Re: "bsalg: parser failed"

Marcus Meissner <[email protected]> Tue, 15 Sep 2015 11:52:24 +0200

Newsgroups	gmane.linux.suse.security
Organization	SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 212 84 (AG Nürnberg)
Message-ID	<[email protected]>

On Tue, Sep 15, 2015 at 09:55:16AM +0200, Markus Gaugusch wrote:
> Hi,
> 
> I'm running a firewall with shorewall-4.6.3.4 (SuSE package) on
> openSUSE 13.2. Since about a week I receive lots and lots of
> messages like these:
> 
> Sep 15 09:37:32 proxy kernel: bsalg: parser failed
> Sep 15 09:37:33 proxy kernel: bsalg: parser failed
> Sep 15 09:37:33 proxy kernel: bsalg: parser failed
> Sep 15 09:37:35 proxy kernel: net_ratelimit: 2 callbacks suppressed
> 
> Last Kernel update was on August 18th, kernel-default 3.16.7-24.1.
> But the messages did not start immediately after this update.
> Shorewall is the original version included in the distribution.

This comes from net/ipv4/netfilter/nf_nat_snmp_basic.c and happens if
SNMP requests can not be correctly NATed.

Open a bug agaisnt the kernel.

If possible, try to capture this SNMP network traffic that causes
this problem.

Ciao, Marcus
-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]